Creating a functional Business Impact Analysis (BIA) can be a daunting task for any organization. As a foundational requirement of any continuity program, it must be completed in order for you to understand risk and drive the development of plans, identification of recovery strategies, and implementation of solutions.
As a company, MHA has conducted well over 2,000 BIA interviews. Our goal is to make sure that the information gathered and the process used are built around ensuring the functionality of the BCM Program. Over the years, we have developed a highly-refined process to plan, conduct and report the results of a formal BIA. That process allows for 3.5 to 4.0 hours of a business unit’s time to complete the BIA. This includes 45 minutes to complete the pre-work, 2.5 hours or less for the interview, and 0.5 hours to validate the results. Often, organizations are now asking us to finish interviews in as little time as possible – often in the 1 – 1.5 hours time frame!
We have learned that while it is possible to perform a BIA efficiently, it is still a time-consuming process, especially when the data is significantly out of date ( > 2 years). Your questionnaire should be in compliance with best practices, but be tightly focused, have limited questions, and be objective. The goal is always a functional outcome, not just “checking the box.”
Involve management and participants from the beginning. Ensure they have a clear picture of what is expected from them in planning, implementation, validation, and approval of the BIAs, and that they understand the end result and the benefit it will provide.
Distribute easy-to-complete pre-work to participants at least 2 to 3 weeks before interviews. Ask them to identify their core business processes, system/application dependencies, and legal/regulatory requirements for each process. Pre-load the data to the BIA tool to speed up the interview.
Stage conference rooms for each interview. Use a projector or monitor to display the BIA tool and data to participants as they walk through it. Participants see the results of their efforts real time. Appropriate breaks and snacks can boost overall participation and comfort.
Choose participants based on their knowledge of the business unit and processes; titles are irrelevant if the participant doesn’t know how the processes work or what they depend on. They must understand the process and impacts, as well as how the process impacts the overall organization.
The tool should be easy to use. A good tool calculates Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs) based on input and is easy for participants to follow.
Choose a facilitator with high energy and enthusiasm to lead the participants. Keep the energy up and they will respond in kind. Bring a bag of chocolate; people love it. At MHA, we use two facilitators, one to lead the discussion and the other to enter the data and take notes.
Remember a functional business impact analysis is never perfect, but as you conduct the BIAs, the participants will gain knowledge and refine results. We know we have done our job and performed a functional BIA when people leave smiling – saying “It wasn’t as bad as thought it was going to be!” It is even better when they say, “I learned a lot.”
Management and/or participants are not apprised of the BIA, what is expected and what will be the end game.
BIA participants do not complete pre-work, don’t complete it on time or it’s so bad that you spend too much time correcting it at the interview and waste valuable time.
Conference rooms don’t have the right audio-visual equipment, rooms are too small, people aren’t fed during lunch interviews, etc.
The right people from each participating unit do not attend and so cannot provide the needed information.
The tool is clunky, complex, and no one has a clue how it works!
The person or person(s) leading the interview do not have the skills to lead the participants through a real-time session. It gets bogged down, people get bored or outright irritated. This is a REALLY dry subject, so if you aren’t charismatic and can’t keep participants focused, it’s not for you.
A strong Business Impact Assessment (BIA) shines a light on critical business processes and identifies which business units, operations and processes are essential to the company’s survival. The BIA is also an opportunity to learn about the enterprise’s operations as well as your enterprise team.
We can use this opportunity to learn what concerns your business partners, to learn how their needs are (or are not) being met by IT and what types of risks exist. By engaging the business units in your process, you not only create a better end-product, you learn and grow, and you forge alliances that benefit your program and the business. So how do you engage your business units? With the BIA Questionnaire.
When developing the Business Impact Analysis (BIA) questionnaire, a single department or business unit should be selected as a test case. The test department can provide feedback on the questionnaire, including its instructions, clarity or questions, and if anything is missing. The following is a list of categories critical to the questionnaire:
Each of the impact categories can be rated according to its impact over time. Once all the questions have been determined, a set of written instructions should be developed and distributed with the BIA questionnaire. They should explain how every field on the form will be used and what the respondent should fill in for each field.
For more information on building a Functional BIA questionnaire, or if you have specific questions, schedule a time to speak with our CEO, Michael Herrera for a one-on-one consultation.
More of our blog posts about the process of conducting a BIA: